MAL-2025-147174 Malicious code in rehype-lint-staged-electron-builder-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0fb7661d97fa79becf96fd616adb271cd58835747f87115d70b43f80dede60f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149782 Malicious code in yaml-aquarius-xenos-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 877cdd5782a7ccd2ad4094b243a61df1ee126983b9a2415a077d58e1353944f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140180 Malicious code in buffer-xenon-meissa-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9313b74b72033a3c8808f05235d43db0602376af815210e74dd8bf694f05bc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141805 Malicious code in duplex-config-capella-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02bc3281086614c8cd6b45aa58e9e18acba38bf7938917b5b04ec3f943b11f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142194 Malicious code in eslint-config-carpo-wezen-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 474671efbafae254395087536634a0fa2478a1859827adcc686b4a54f49d2c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140576 Malicious code in ceres-scripts-koa-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed4e8bf1de4a6e5485b179ffede3ed09c77c20f0f6da0128140f27abc9d497c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147251 Malicious code in remark-markdownlint-capella-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de9166b3835951835342cf08b9670e0fdccfae51b57ad4dfa313de94f2739e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139919 Malicious code in barnard-vuetify-lyra-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07108cd652ceada4468f324d199ae04c8c6c8ba9df2e5ec80f10369d97ecec95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140972 Malicious code in commitlint-config-angular-ultra-ariel-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5ad258019d17cd509e8f6df52866f9c59c14140aee5a0bc52dfe9f6b0071a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148609 Malicious code in testcafe-winston-callisto-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf272c98e5a3824de3e534e3d0a63eb805e741d778b1de6da4cc3ece2aebba1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149035 Malicious code in upgrade-telesto-forever-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991719e6fabbfb2f836d676ac219365c07b5cf2a8dd616e1734bc8da03db23bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147376 Malicious code in restart-convict-juno-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd09aa128504dfe01d7d06581a8d6530ecd19d02baa8186a06612eaee198b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in draco-xerxes-parcel-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 575a8ae56cda8728c11a9bb1f81db900ad4861cb7e1ce24d25010623344981c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concurrently-async-graphql-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e423d178b25c621093439cac9ee66381edc17e5d3f4a0cd24bb4303865868754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-fork-draco-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c955d990db2c8b50291158cda63b6a0c64616f530042044ca39f552cee4010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-yakutsk-relay-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c90af33d81fd2bd68c1e36ccc3c13600a08f9957b7fdd7c2c3a2bdda5e4a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-private-electron-builder-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0efc83769ffc86634fb8641fd68519805cdc2c8c3d59fbda9c45f154c7b48d4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-phoebe-sadr-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5208ccc41af2c843d0b1d835d47e794441dfe0f3eaaaca4f890d1c07a484324b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-pegasus-chalk-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c65b96b85ff686d1cdf5c755e0a2d632a44a975b46e822479027d76f97232a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-loopback-tailwindcss-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ed40b84ddbb296e2da31d1c24d9acb00f278cc44f7ec2cbe040a1547517e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...